Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

courier: denial of service

Package(s):

courier

CVE #(s):

CVE-2006-2659

Created:

June 9, 2006

Updated:

August 4, 2006

Description:

A denial of service vulnerability has been found in the function for encoding email addresses. Addresses containing a '=' before the '@' character caused the Courier to hang in an endless loop, rendering the service unusable.

Alerts:

Gentoo	200608-06	2006-08-04
Debian	DSA-1101-1	2006-06-23
Ubuntu	USN-294-1	2006-06-09

(Log in to post comments)